You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

help please

My uncle's computer is having homepage hijacking and other spyware or adware type problems. I've tried running both ad-aware, and spybot search and destroy to no avail. Here is the HijackThis log. Any help would be greatly appreciated.

Unzip about:buster to your desktop, and install Adaware. Please make sure Adaware is up to date by clicking on the globe icon in the upper right hand corner. If you need help, here is a nice Adaware Tutorial from Bleeping Computer.*********************************************************************** Please print out this thread, as you will not be able to open IE until you are instructed to do so. :D

*********************************************************************** Boot into SAFE MODE by tapping the f8 key during boot up.

All of the following settings I mention should be enabled (green checkmark). Some settings cannot be enabled in certain versions of Windows. If a setting I mention is grey and can't be enabled, skip it.

I did all of that except the last step because IE kept getting an error everytime I tried to load the virus scanning program. Unfortunately, I am still getting popups and my homepage is still getting hijacked. Here are all my new logs.

Please download this file to your desktop and extract the file from the zip onto your desktop. Then run the vbs file and post the contents of the notepad that will appear as a response to this message. (in your next reply)

Open Folder and double click on RunFix.reg file.Hit 'Yes' to merge it into your registry.Restart your computer.

The bad file should now be visible so you can delete it.Browse to C:\WINDOWS\SYSTEM\D3DBEAD.DLL.Right click select 'Properties' and remove any 'Read only' protection.Right click again and select 'Delete'.

(If you cannot find the file, run the 'Who.bat' file in the folder.The file will be found and listed.)

Then, locate fixme.reg on your Desktop and double-click on it. You will receive a prompt similar to: "Do you wish to merge the information into the registry?". Answer 'Yes' and wait for a message to appear similar to "Merged Successfully".